Devotion Dresses

Privacy Policy

## 1. Introduction This Privacy Policy describes how Devotion s.r.o. ("we", "us", or "our") collects, uses, and discloses your Personal Information when you visit, use services, or make a purchase from www.devotiondresses.com (the "Site"). By using the Site, you agree to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree, please do not use the Site. Contact Information: For any questions regarding this policy or your Personal Information, please contact us at: - Email: info@devotionweddingdresses.com - Mailing Address: Devotion s.r.o., Na Male Sarce 801, 164 00 Prague, Czechia ## 2. Collection of Personal Information We collect Personal Information from various sources to provide and improve our services. "Personal Information" means any information that identifies or can be used to identify an individual. ### 2.1. Information You Provide to Us - **Order Information:** When you make a purchase, we collect your name, billing address, shipping address, payment information (including credit card numbers), email address, and phone number. - **Custom Measurement Information:** To fulfill orders for custom-made dresses, we collect sensitive Personal Information including your bust, waist, hip, height, and other body measurements. - **Customer Support Information:** When you contact us for support, we collect the information you provide in your communications. - **Customer Photos and Stories:** With your explicit consent, we may collect photos, stories, and testimonials you voluntarily submit for use in our marketing materials and on our Site. - **Virtual Try-On Photos:** When you use our Virtual Try-On feature, you may upload a photograph of yourself. Please see Section 3.1 for detailed information on how these images are processed. ### 2.2. Information Collected Automatically - **Device Information:** When you access the Site, we automatically collect your IP address, browser type, time zone, cookie information, and data on how you interact with the Site. This is collected via cookies, log files, and similar technologies. ## 3. Use of Personal Information We use your Personal Information for the following purposes: - **Providing Products and Services:** To process your payments, arrange for shipping, fulfill your orders (including the creation of custom-made dresses), and provide you with invoices and order confirmations. - **Communication:** To communicate with you regarding your orders and to provide customer support. - **Marketing and Advertising:** With your consent, to provide you with information or targeted advertising relating to our products and services. - **Security and Fraud Prevention:** To screen orders for potential risk or fraud. - **Site Optimization:** To analyze Site usage and optimize our services. ### 3.1. Virtual Try-On Feature — AI Image Processing Our Virtual Try-On feature allows you to upload a personal photograph to visualise how a wedding dress may look on you. By using this feature, you acknowledge and agree to the following: **How it works:** Your uploaded photograph is sent to a third-party AI image generation service (operated via a secure API gateway) which processes your image together with an image of the selected dress to generate a composite visualisation. The generated image is returned to your browser for viewing, downloading, and sharing. **Data we collect and retain:** - For quality assurance and troubleshooting purposes only, we temporarily store a copy of your uploaded photograph and the AI-generated result in a secure, access-restricted storage system. - These copies are **automatically and permanently deleted after five (5) days**. No manual intervention is required. **What we do NOT do with your photos:** - We do **NOT** use your uploaded photographs or the generated images to train, fine-tune, or improve any AI or machine learning models. - We do **NOT** create biometric profiles, facial recognition templates, or any persistent biometric identifiers from your images. - We do **NOT** sell, license, share, or otherwise distribute your uploaded photographs or generated images to any third party for any purpose, including marketing, advertising, or research. - We do **NOT** retain your images beyond the five (5) day troubleshooting window described above. **Legal basis (GDPR Art. 6):** The processing of your photograph through the Virtual Try-On feature is based on your **explicit consent**, which you provide by voluntarily uploading your photo and initiating the try-on process. You are under no obligation to use this feature. You may withdraw consent at any time by contacting us, in which case we will delete any stored copies of your images immediately. **Third-party processing:** The AI processing is performed by a third-party service provider acting as a data processor on our behalf. Your image data is transmitted securely (encrypted in transit), processed solely for the purpose of generating the try-on visualisation, and is not retained by the third-party provider after the request is completed. **Your rights:** You have the right to request the immediate deletion of any temporarily stored images at any time by contacting us at info@devotionweddingdresses.com. ## 4. Sharing of Personal Information We share your Personal Information with trusted third-party service providers to help us operate our business and provide our services. These include: - **AI Image Processing Providers:** When you use the Virtual Try-On feature, your uploaded photograph is processed by a third-party AI service provider solely to generate the try-on visualisation. No data is retained by the provider after processing. - **Advertising Partners:** We share information with advertising partners (e.g., Google Analytics) to provide targeted advertising. You can opt-out of targeted advertising via the links provided in Section 7. - **Legal Compliance:** We may disclose your Personal Information to comply with applicable laws and regulations, to respond to a lawful request for information, or to otherwise protect our rights. ## 5. Lawful Basis for Processing (EEA Residents) If you are a resident of the European Economic Area (EEA), we process your Personal Information under the following lawful bases, pursuant to the General Data Protection Regulation (GDPR): - Your explicit consent (including for Virtual Try-On photo processing); - The performance of the contract between you and the Site; - Compliance with our legal obligations; - Our legitimate interests, which do not override your fundamental rights and freedoms. ## 6. Data Retention We will retain your Personal Information for our records for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless and until you ask us to erase this information. **Virtual Try-On images** are subject to a strict five (5) day automatic deletion policy and are not retained beyond this period under any circumstances. ## 7. Your Rights ### 7.1. EEA Residents (GDPR) If you are an EEA resident, you have the right to: - Access the Personal Information we hold about you. - Request that your Personal Information be corrected, updated, or erased. - Object to processing based on automated decision-making. - Port your data to a new service. - Withdraw your consent to processing at any time (including for Virtual Try-On). To exercise these rights, please contact us using the information provided in Section 1. ### 7.2. California Residents (CCPA) If you are a California resident, you have the right to know what Personal Information we collect, and to request its correction or erasure. To exercise these rights, please contact us. ### 7.3. Opt-Out of Targeted Advertising You can opt out of targeted advertising from major providers via these links: - [Google](https://www.google.com/settings/ads/anonymous) - [Facebook](https://www.facebook.com/settings/?tab=ads) - [Bing](https://advertise.bingads.microsoft.com/en-us/resources/policies/personalized-ads) ## 8. Cookies We use cookies to optimize your experience on our Site. Cookies are small files downloaded to your device that help the Site remember your actions and preferences. You can control and manage cookies through your browser settings. ## 9. Data Transfers Your Personal Information may be transferred, stored, and processed outside of your country of residence, including in the United States and Canada. We ensure that data transfers comply with legal requirements (e.g., GDPR) to provide adequate protection. ## 10. Complaints and Supervisory Authority If you have a complaint about our privacy practices, please contact us first. If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority. Our lead supervisory authority is: The Office for Personal Data Protection (Úřad pro ochranu osobních údajů) — [www.uoou.cz](https://www.uoou.cz) ## 11. Changes to This Privacy Policy We may update this Privacy Policy from time to time to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the new policy on this page.